分享到微信
信息安全工程師當(dāng)天每日一練試題地址：www.pokkc.com/exam/ExamDay.aspx?t1=6
往期信息安全工程師每日一練試題匯總：www.pokkc.com/class/27/e6_1.html
信息安全工程師每日一練試題（2022/5/1）在線測(cè)試：www.pokkc.com/exam/ExamDay.aspx?t1=6&day=2022/5/1
點(diǎn)擊查看：更多信息安全工程師習(xí)題與指導(dǎo)
信息安全工程師每日一練試題內(nèi)容（2022/5/1）
試題1
IP地址分為全球地址和專(zhuān)用地址,以下屬于專(zhuān)用地址的是（ ）。
A.192.172.1.2
B. 10.1.2.3
C.168.1.2.3
D.172.168.1.2查看答案
試題參考答案：B
試題解析與討論：www.pokkc.com/st/3896521323.html
試題2
目前網(wǎng)絡(luò)安全形勢(shì)日趨復(fù)雜，攻擊手段和攻擊工具層出不窮，攻擊工具日益先進(jìn), 攻擊者需要的技能日趨下降。以下關(guān)于網(wǎng)絡(luò)攻防的描述中，不正確的是（ ）。
A.嗅探器Sniffer工作的前提是網(wǎng)絡(luò)必須是共享以太網(wǎng)
B.加密技術(shù)可以有效抵御各類(lèi)系統(tǒng)攻擊
C.APT的全稱(chēng)是高級(jí)持續(xù)性威脅
D.同步包風(fēng)暴(SYN Flooding)的攻擊來(lái)源無(wú)法定位查看答案
試題參考答案：B
試題解析與討論：www.pokkc.com/st/411479305.html
試題3
容災(zāi)的目的和實(shí)質(zhì)是（）
A.實(shí)現(xiàn)對(duì)系統(tǒng)數(shù)據(jù)的備份
B.提升用戶的安全預(yù)期
C.保持對(duì)信息系統(tǒng)的業(yè)務(wù)持續(xù)性
D.信息系統(tǒng)的必要補(bǔ)充查看答案
試題參考答案：C
試題解析與討論：www.pokkc.com/st/3271523601.html
試題4
ISO制定的安全體系結(jié)構(gòu)描述了5種安全服務(wù)，以下不屬于這5種安全服務(wù)的是（）
A.鑒別服務(wù)
B.數(shù)據(jù)報(bào)過(guò)濾
C.訪問(wèn)控制
D.數(shù)據(jù)完整性查看答案
試題參考答案：B
試題解析與討論：www.pokkc.com/st/3270424021.html
試題5
Kerberos是一種常用的身份認(rèn)證協(xié)議，它采用的加密算法是（）
A、Elgamal
B、DES
C、MD5
D、RSA查看答案
試題參考答案：B
試題解析與討論：www.pokkc.com/st/2847116804.html
試題6
The modern study of symmetric-key ciphers relates mainly to the study of block ciphers and stream ciphers and to their applications. A block cipher is, in a sense, a modern embodiment of Alberti's polyalphabetic cipher: block ciphers take as input a block of （71 ）and a key, and output a block of ciphertext of the same size. Since messages are almost always longer than a single block, some method of knitting together successive blocks is required. Several have been developed, some with better security in one aspect or another than others. They are the mode of operations and must be carefully considered when using a block cipher in a cryptosystem.
The Data Encryption Standard (DES) and the Advanced Encryption Standard (AES) are( 72 )designs which have been designated cryptography standards by the US government (though DES's designation was finally withdrawn after the AES was adopted). Despite its deprecation as an official standard, DES (especially its still-approved and much more secure triple-DES variant) remains quite popular; it is used across a wide range of applications, from ATM encryption to e-mail privacy and secure remote access. Many other block ciphers have been designed and released, with considerable variation in quality. Many have been thoroughly broken. See Category: Block ciphers.
Stream ciphers, in contrast to the ‘block’type, create an arbitrarily long stream of key material, which is combined ( 73 )the plaintext bit-by-bit or character-by-character, somewhat like the one-time pad. In a stream cipher, the output( 74 )is created based on an internal state which changes as the cipher operates. That state change is controlled by the key, and, in some stream ciphers, by the plaintext stream as well. RC4 is an example of a well-known, and widely used, stream cipher; see Category: Stream ciphers.
Cryptographic hash functions (often called message digest functions) do not necessarily use keys, but are a related and important class of cryptographic algorithms. They take input data (often an entire message), and output a short fixed length hash, and do so as a one-way function. For good ones, ( 75 ) (two plaintexts which produce the same hash) are extremely difficult to find.
Message authentication codes (MACs) are much like cryptographic hash functions, except that a secret key is used to authenticate the hash value on receipt. These block an attack against plain hash functions.
（71）
A.plaintext
B.ciphertext
C.data
D.hash
（72）
A.stream cipher
B.hash function
C.Message authentication code
D.Block cipher
（73）
A.of
B.for
C.with
D.in
（74）
A.hash
B.stream
C.ciphertext
D.plaintext
（75）
A.collisions
B.image
C.preimage
D.solution查看答案
試題參考答案：A、D、C、B、A
試題解析與討論：www.pokkc.com/st/4115223167.html
試題7
攻擊者通過(guò)對(duì)目標(biāo)主機(jī)進(jìn)行端口掃描可以直接獲得（ ）。
A.目標(biāo)主機(jī)的操作系統(tǒng)信息
B.目標(biāo)主機(jī)開(kāi)放端口服務(wù)信息
C.目標(biāo)主機(jī)的登錄口令
D.目標(biāo)主機(jī)的硬件設(shè)備信息查看答案
試題參考答案：B
試題解析與討論：www.pokkc.com/st/3897019734.html
試題8
PKI中撤銷(xiāo)證書(shū)是通過(guò)維護(hù)一個(gè)證書(shū)撤銷(xiāo)列表CRL來(lái)實(shí)現(xiàn)的。以下不會(huì)導(dǎo)致證書(shū)被撤銷(xiāo)的是（ ）。
A.密鑰泄漏
B.系統(tǒng)升級(jí)
C.證書(shū)到期
D.從屬變更查看答案
試題參考答案：B
試題解析與討論：www.pokkc.com/st/4114120079.html
試題9
如果對(duì)一個(gè)密碼體制的破譯依賴于對(duì)某一個(gè)經(jīng)過(guò)深入研究的數(shù)學(xué)難題的解決，就認(rèn)為相應(yīng)的密碼體制是（ ）的。
A.計(jì)算安全
B.可證明安全
C.無(wú)條件安全
D.絕對(duì)安全查看答案
試題參考答案：B
試題解析與討論：www.pokkc.com/st/411494857.html
試題10
研究密碼破譯的科學(xué)稱(chēng)為密碼分析學(xué)。密碼分析學(xué)中，根據(jù)密碼分析者可利用的數(shù)據(jù)資源，可將攻擊密碼的類(lèi)型分為四種，其中適于攻擊公開(kāi)密鑰密碼體制，特別是攻擊其數(shù)字簽名的是 （ ）。
A、僅知密文攻擊
B、已知明文攻擊
C、選擇密文攻擊
D、選擇明文攻擊查看答案
試題參考答案：C
試題解析與討論：www.pokkc.com/st/410878655.html
掃碼關(guān)注公眾號(hào)
溫馨提示：因考試政策、內(nèi)容不斷變化與調(diào)整，信管網(wǎng)網(wǎng)站提供的以上信息僅供參考，如有異議，請(qǐng)以權(quán)威部門(mén)公布的內(nèi)容為準(zhǔn)！
信管網(wǎng)致力于為廣大信管從業(yè)人員、愛(ài)好者、大學(xué)生提供專(zhuān)業(yè)、高質(zhì)量的課程和服務(wù)，解決其考試證書(shū)、技能提升和就業(yè)的需求。
信管網(wǎng)軟考課程由信管網(wǎng)依托10年專(zhuān)業(yè)軟考教研傾力打造，官方教材參編作者和資深講師坐鎮(zhèn)，通過(guò)深研歷年考試出題規(guī)律與考試大綱，深挖核心知識(shí)與高頻考點(diǎn)，為學(xué)員考試保駕護(hù)航。面授、直播＆錄播，多種班型靈活學(xué)習(xí)，滿足不同學(xué)員考證需求，降低課程學(xué)習(xí)難度，使學(xué)習(xí)效果事半功倍。
相關(guān)內(nèi)容
| 發(fā)表評(píng)論 查看完整評(píng)論 | |
考試新手指南
學(xué)習(xí)計(jì)劃攻略
精華備考資料
案例論文干貨
章節(jié)模擬試題
免費(fèi)試聽(tīng)課程
考試信息推送